Subject: Re: [keyassure] Key linkage draft, -00 edition

From: Paul Hoffman <[email-masked]>
Date: Thu, 19 Aug 2010 07:59:28 -0700

>Quick question: did you consider DKIM key records for this?
>(With a new "s=" value in the TXT RR.)
>
>If so, why don't they rate a mention? If not, maybe worth a
>look?

First off, the idea of TXT RRs without _label prefixes has been mostly deprecated in the IETF. Second, the idea of saying "this isn't DKIM, it's this new thing" by changing "s=" is begging for trouble. There are enough tricky semantics in the DKIM spec (not as many as in PKIX, but it sometimes feels that way) that reusing it would likely prevent us from having the freedom we want.

--Paul Hoffman, Director
--VPN Consortium